Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/RTdZAzRlfSbmwnyl7CcZRb1--3I.roa
File:                     RTdZAzRlfSbmwnyl7CcZRb1--3I.roa (raw, json)
Hash identifier:          j6lYbomKIBqIpvvwf0NszHXyWrhZ9hVVAqzE6GVADiw=
Subject key identifier:   45:37:59:03:34:65:7D:26:E6:C2:7C:A5:EC:27:19:45:BD:7E:FB:72
Certificate issuer:       /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial:       01856ED4EDC17F252E8B7DF47E4BA59E09AF
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/RTdZAzRlfSbmwnyl7CcZRb1--3I.roa
Signing time:             Sun 01 Jan 2023 19:35:26 +0000
ROA not before:           Sun 01 Jan 2023 19:35:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201706
IP address blocks:        92.53.65.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:ed:c1:7f:25:2e:8b:7d:f4:7e:4b:a5:9e:09:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
        Validity
            Not Before: Jan  1 19:35:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4537590334657d26e6c27ca5ec271945bd7efb72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ef:4d:8c:b5:a9:59:16:54:bd:cd:da:31:c8:
                    ee:15:8f:62:f6:a0:26:69:e4:0b:39:65:9d:c6:69:
                    10:38:88:8b:ee:b1:03:06:9a:4d:75:c4:81:24:49:
                    bb:f0:8b:85:e1:14:21:e7:47:0a:b1:aa:ad:2d:cc:
                    23:1a:89:f7:cb:9d:21:49:0a:2e:b8:4e:c6:74:72:
                    11:ab:af:a6:01:43:29:1c:66:4d:3b:91:ff:21:4d:
                    bf:08:39:a6:24:48:37:53:fa:a4:3d:7a:97:cc:a8:
                    e7:9f:47:a4:4f:eb:0e:6b:f9:34:32:a4:a4:95:ed:
                    6c:41:ac:27:40:28:4d:0c:85:d5:98:bb:e5:6f:7a:
                    b3:62:16:a8:e5:c6:1b:7d:35:8b:86:aa:60:ed:2d:
                    2f:fa:69:2c:64:e4:b6:c3:ff:4f:5c:07:aa:c1:b5:
                    dd:93:1f:db:a0:fb:d2:b8:02:f3:f4:6f:10:f3:ba:
                    b7:a4:d1:97:13:8b:8a:18:90:45:fb:ac:d7:4a:8a:
                    4a:f4:95:92:92:50:4e:ca:eb:55:35:53:8a:68:f8:
                    81:b1:14:d2:05:1a:0e:3d:b8:fd:40:dc:3c:c1:6d:
                    70:67:4f:5a:b6:ec:38:62:66:e6:71:38:61:aa:56:
                    4c:84:98:fa:41:9a:71:c3:37:c8:9e:15:7e:67:04:
                    eb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:37:59:03:34:65:7D:26:E6:C2:7C:A5:EC:27:19:45:BD:7E:FB:72
            X509v3 Authority Key Identifier:
                keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/RTdZAzRlfSbmwnyl7CcZRb1--3I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.53.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:b1:37:d8:5f:ba:79:01:4c:dd:91:7d:b2:46:eb:15:e9:18:
         48:18:8c:7d:24:52:12:53:bb:8d:76:b5:c1:41:24:06:93:6d:
         52:38:3f:27:09:bd:a9:cd:ba:b3:0f:bf:3e:68:15:97:f5:f7:
         f2:07:fd:fb:58:dd:de:6c:98:36:1e:58:46:ea:2f:e8:d8:eb:
         93:29:f7:ef:2b:88:9f:c4:7a:57:4b:ed:23:f8:e5:fb:b5:47:
         14:b8:26:28:09:da:6c:03:6d:81:35:00:52:81:1e:52:c4:7f:
         c1:a3:ab:50:4f:51:1d:5a:be:f2:f4:d9:c4:da:d0:81:b8:d6:
         4f:d0:60:d2:06:f7:25:9f:ef:81:1f:b1:84:cb:1d:5f:17:71:
         c3:b4:0f:ba:b3:76:f6:85:f1:11:8f:cb:66:4c:47:f4:58:9a:
         1f:6b:a8:3f:2a:55:17:09:e8:e8:c6:03:ad:d4:f9:8e:eb:33:
         81:0f:60:4d:6b:9e:d3:44:7d:b0:c3:8e:64:5f:4f:ac:eb:4e:
         f2:2f:f3:02:3f:f1:4e:18:7b:e4:a3:b3:04:ae:5f:65:ce:15:
         bd:11:6e:76:13:40:13:b0:b3:de:1b:85:88:24:a2:dc:f3:96:
         51:14:3d:0b:a4:6b:c8:58:88:a4:68:40:83:06:b2:25:f6:47:
         7b:24:96:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1O3BfyUui330fkulngmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYjY5YjU5ZDE5ZjI5ODdlNDlmMTg1MmQ2MGJiMTc3N2Y4
MGEzMDEwHhcNMjMwMTAxMTkzNTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTM3NTkwMzM0NjU3ZDI2ZTZjMjdjYTVlYzI3MTk0NWJkN2VmYjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge9NjLWpWRZUvc3aMcjuFY9i9qAm
aeQLOWWdxmkQOIiL7rEDBppNdcSBJEm78IuF4RQh50cKsaqtLcwjGon3y50hSQou
uE7GdHIRq6+mAUMpHGZNO5H/IU2/CDmmJEg3U/qkPXqXzKjnn0ekT+sOa/k0MqSk
le1sQawnQChNDIXVmLvlb3qzYhao5cYbfTWLhqpg7S0v+mksZOS2w/9PXAeqwbXd
kx/boPvSuALz9G8Q87q3pNGXE4uKGJBF+6zXSopK9JWSklBOyutVNVOKaPiBsRTS
BRoOPbj9QNw8wW1wZ09atuw4YmbmcThhqlZMhJj6QZpxwzfInhV+ZwTrOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEU3WQM0ZX0m5sJ8pewnGUW9fvtyMB8GA1UdIwQY
MBaAFBG2m1nRnymH5J8YUtYLsXd/gKMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTIt
ZDE2OWMwODhiNDEyLzEvUlRkWkF6UmxmU2Jtd255bDdDY1pSYjEtLTNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTItZDE2OWMwODhiNDEy
LzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXDVBMA0G
CSqGSIb3DQEBCwUAA4IBAQBvsTfYX7p5AUzdkX2yRusV6RhIGIx9JFISU7uNdrXB
QSQGk21SOD8nCb2pzbqzD78+aBWX9ffyB/37WN3ebJg2HlhG6i/o2OuTKffvK4if
xHpXS+0j+OX7tUcUuCYoCdpsA22BNQBSgR5SxH/Bo6tQT1EdWr7y9NnE2tCBuNZP
0GDSBvcln++BH7GEyx1fF3HDtA+6s3b2hfERj8tmTEf0WJofa6g/KlUXCejoxgOt
1PmO6zOBD2BNa57TRH2ww45kX0+s607yL/MCP/FOGHvko7MErl9lzhW9EW52E0AT
sLPeG4WIJKLc85ZRFD0LpGvIWIikaECDBrIl9kd7JJa9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:36 2024 by rpki-client on console-fra.rpki-client.org